senior cybersecurity incident response engineer (Remote, US)

Starbucks; Seattle (WA); On-site; USD 120,000 - 180,000; Full time

Benefits offered by this job

Medical, dental, vision coverage

401(k) with company match

Tuition assistance

Job summary

Starbucks is hiring an Incident Response Engineer Sr to manage and run cyber security incident investigations across the company. You will identify threats, lead containment and remediation efforts, and perform forensic analysis across endpoints, networks, and cloud environments.

You will also document runbooks, build response automation, and mentor junior team members while reflecting Starbucks values in daily operations.

Qualifications

• 5+ years in Information Technology or Information Security.
• 2+ years in SOC/Incident Response.
• Strong written and verbal communication with technical and non-technical audiences.
• Deep understanding of modern cybersecurity principles.
• Experience with threat hunting using MITRE ATT&CK framework.
• Able to manage multiple priorities and meet deadlines.
• Ability to learn new technologies quickly.
• Knowledge of compliance like SOX and PCI.

Responsibilities

• Identify and investigate security threats; triage and analyze incidents.
• Lead incident response efforts including containment and remediation.
• Perform forensic analysis on endpoints, network, or cloud.
• Create and maintain playbooks and standard operating procedures.
• Build tools and automation to speed up response.
• Mentor junior team members and act as escalation point.
• Align work with Starbucks values of integrity, collaboration and excellence.

Skills

Incident response

SOC experience

Threat hunting

MITRE ATT&CK

Forensic analysis

Playbooks & SOPs

Automation

Mentoring

Communication

Tools

Python

PowerShell

Linux/Windows

Cloud platforms

SIEM tooling

Job description

Now Brewing – Incident Response Engineer Sr! #tobeapartner

From the beginning, Starbucks set out to be a different kind of company. One that not only celebrated coffee and the rich tradition, but that also brought a feeling of connection.

As an Incident Response Engineer Sr, you will be responsible for managing and running cyber security incident investigations across Starbucks.

As An Incident Response Engineer Sr, You Will

• Identify and investigate security threats: You'll be the first line of defense, identifying, triaging, and digging into potential security incidents.
• Leading incident response efforts: When something goes wrong, you’ll help coordinate containment, remediation, and root cause analysis to ensure we resolve issues quickly and learn from them.
• Performing forensic analysis: Whether it’s on endpoints, across the network, or in the cloud, you’ll conduct forensic investigations to uncover how incidents occurred and what was affected.
• Creating and maintaining playbooks: You’ll document and implement runbooks and standard operating procedures to make sure our response efforts are consistent and efficient.
• Building tools and automation: You’ll design and develop capabilities that help us respond faster and smarter, including automation to streamline repetitive tasks.
• Supporting the team: You’ll act as a mentor and escalation point for junior team members, helping them grow and ensuring high-quality work across the board.
• Living our values: You’ll model and act in accordance with Starbucks’ guiding principles, contributing to a culture of integrity, collaboration, and excellence.

We’d Love To Hear From People With

• 5 or more years of experience in Information Technology, Information Security or similar disciplines.
• 2 additional years of experience in a Security Operations Center (SOC), Incident Response, or similar capacity responding to alerts and/or incidents.
• Effective written and oral communication skills with both technical and non-technical audiences.
• Deep technical understanding of modern Cybersecurity principles.
• Demonstrated experience with threat hunting for threat actor TTPs based on MITRE ATT&CK framework
• Ability to balance multiple priorities and meet deadlines.
• Ability to quickly learn new technology concepts.
• Understanding of compliance and regulatory requirements such as SOX and PCI.
• Strong collaboration mindset
• Excellent problem-solving abilities.
• Passionate about cybersecurity and self-driven to become an expert.

This position contributes to Starbucks’ success through the investigation and response to cybersecurity incidents. You should have strong problem-solving skills, excellent communication skills, a deep technical understanding of modern cybersecurity threats and relevant protections against them. You consistently demonstrate ownership; if you see a problem, you step up and lead others to act; never assuming someone else will clean it up. You excel in collaborative environments where a multitude of people are required to get a job done.

As a Starbucks partner, you (and your family) will have access to medical, dental, vision, basic and supplemental life insurance, and other voluntary insurance benefits. Partners have access to short-term and long-term disability, paid parental leave, family expansion reimbursement, paid vacation from date of hire*, sick time (accrued at 1 hour for every 25 hours worked), eight paid holidays, and two personal days per year. Starbucks also offers eligible partners participation in a 401(k) retirement plan with employer match, a discounted company stock program (S.I.P.), Starbucks equity program (Bean Stock), incentivized emergency savings, and financial well-being tools. Additionally, Starbucks offers 100% upfront tuition coverage for a first-time bachelor’s degree through Arizona State University’s online program via the Starbucks College Achievement Plan, student loan management resources, and access to other educational opportunities. You will also have access to backup care and DACA reimbursement. Starbucks will comply with any applicable state and local laws regarding employee leave benefits, including, but not limited to providing time off pursuant to the Colorado Healthy Families and Workplaces Act, and in accordance with its plans and policies. This list is subject to change depending on collective bargaining in locations where partners have a certified bargaining representative. For additional information regarding partner perks and more detailed information about benefits, go to starbucksbenefits.com.

• If you are working in CA, CO, IL, LA, ME, MA, NE, ND or RI, you will accrue vacation up to a maximum of 120 hours (190 in CA) for roles below director and 200 hours (316 in CA) for roles at director or above. For roles in other states, you will be granted vacation time starting at 120 hours annually for roles below director and 200 hours annually for roles director and above.

The actual base pay offered to the successful candidate will be based on multiple factors, including but not limited to job-related knowledge/skills, experience, geographical location, and internal equity. At Starbucks, it is not typical for an individual to be hired at the high end of the range for their role, and compensation decisions are dependent upon the facts and circumstances of each position and candidate.

Starbucks Coffee Company is an equal opportunity employer. All qualified applicantswill receive considerationfor employment without regard to race, color, religion, sex, sexual orientation, gender identity, age, national origin, disability, orprotectedveteran status,or any other characteristic protected by law.

Qualified applicants with criminal histories will be considered for employment in a manner consistent with all federal, state and local ordinances.

Starbucks Coffee Company is committed to offering reasonableaccommodations to job applicants with disabilities. If you need assistance or an accommodation due to a disability, please contact us at applicantaccommodation or 1(888) 611-2258.